A 360 Degree Approach to HIPAA Compliance
A good approach to meeting HIPAA security compliance requirements begins with a security management resolution - one that enables real-time monitoring, compliance reporting and management management. Technology alone but, is not the answer. The best route to compliance could be a 360 degree approach that integrates existing people, processes, and policies with technology. The muse of a compliance resolution for all healthcare organizations is an enterprise-category Security Data Management (SIM) solution.
Seven Crucial HIPAA Initiatives
1. Policy
Outline a policy-driven security management program which will be incorporated ahead of time into business processes - Determine the people and technology controls required to satisfy an organization's security mission and guarantee HIPAA compliance. Conjointly, guarantee that security initiatives are integrated into business processes at their onset, rather than when the fact.
2. Security Controls
Validate security controls - Offer for the monitoring and reporting of controls on human actions and decisions, process controls, and info technology controls.
3. Risk Management
Implement a risk management approach to info security - Comprise active monitoring of risk as outlined and measured by key control indicators (KCIs) and key risk indicators (KRIs), correlating the relative worth of information assets, the threats to the confidentiality, integrity, and availability of the assets, and also the vulnerability of the systems and design that store and carry the assets.
4. Due Diligence
Demonstrate due diligence in the appliance of internal controls - Create a link between the protection infrastructure and policy by capturing all security events from all network hosts, devices, and assets in an auditable database.
5. Incident Management
Develop and implement an effective security-incident management method - Demonstrate that the correct steps were taken to correct systems and alter policy if a non-compliant state of affairs is identified.
6. Reporting
Enable reporting that may facilitate demonstrate compliance - Demonstrate the continuing security of compliance-related assets over a amount of time, recreating the organization's security posture if required to obtain HIPAA certification, and enabling security performance management against metrics that can be leveraged for company governance initiatives.
7. Preserving Data
Establish capabilities for archiving and preserving data - Preserve near-term and long-term knowledge in its purest type for forensics and evidentiary presentation. By leveraging SIM to implement effective, comprehensive policies and procedures for establishing accountability and consistent reporting practices, healthcare organizations will successfully meet HIPAA regulatory compliance directives.
Example: Security Information Management and HIPAA Compliance
Wheaton Franciscan Healthcare a nonprofit healthcare organization based in Wheaton, Illinois required to enhance their visibility into network security and improve reporting capabilities to enable HIPAA compliance. The organization size created enormous challenges.
With seventeen hospitals and more than 70 clinics in Colorado, Illinois, Iowa, and Wisconsin, the initiative involved nearly100 security devices, together with firewalls, intrusion protection systems, virtual personal network concentrators, and authentication services..The organization manually reviewed many of its security devices, though some were unmanageable due to the enormous volume of event log data. Wheaton turned to a leading Security Information Management resolution to bring its security initiatives beneath control.
Wheaton was in a position to reduce its monitoring workload and minimize downtime by leveraging this resolution to react more quickly to threats. With improved visibility into the network and the power to assess its risk posture at any given point in time, Wheaton raised security and reporting to the extent required for HIPAA compliance.
Author Resource:-
Bob has been writing articles online for nearly 2 years now. Not only does this author specialize in regulatory compliance,you can also check out his latest website about:
Bride Dolls which reviews and lists the best
Porcelain Bride Doll
![[Valid RSS feed]](http://www.healthandwealth4you.com/images/icon_Rss.png "XML Feed For RSS"){kind=icon}
Category Rss Feed
Print This Article
Add To Favorites
